Docker
Learn how to feed secrets from Hanzo KMS into your Docker application.
There are many methods to inject Hanzo KMS secrets into Docker-based applications. Regardless of the method you choose, they all inject secrets from Hanzo KMS as environment variables into your Docker container.
Install and run your app start command with KMS CLI
Feed secrets with the --env-file flag when using the
docker run command
Inject secrets into multiple services using Docker Compose
The main difference between the "Docker Entrypoint" and "Docker run" approach is where the KMS CLI is installed. In most production settings, it's typically less convenient to have the KMS CLI installed and executed externally, so we suggest using the "Docker Entrypoint" method for production purposes. However, if this limitation doesn't apply to you, select the method that best fits your needs.
How is this guide?
Last updated on